71–80 of 127 posts
https://www.ssllabs.com/ssltest/analyze.html?d=web.whatsapp....
Are they serious???
- Vulnerable to POODLE
- too short HSTS value
- RC4
- SSL3
EDIT: As only Chrome is supported, RC4 & SSL3 are moot.
To be fair, the WeChat desktop client also requires that you scan a QR code from your smartphone to log in. I'm not defending WeChat, but it doesn't seem like the author knows WhatsApp is not alone there.
author here. I didn't knew about WeChat since it is not popular here in Brazil. Using a QR to facilitate login is not a bad decision. Having this as the only method to authenticate makes it a bad client because it can't work as a standalone offering. I don't like when "web clients" are not full featured in the sense of allowing registration and login. Look at Evernotes, you can register and use thru the web client in…
While i agree whatsapp web should work in every browser the auther is forgetting one IMPORTANT gotcha: Whatsapp, is a messaging-routing platform. It doesnt store any messages. Thats what makes whatsapp strong. Its a feature. Thats why you need your phone. Its like SMS. They are not storing all your sensitive message. If you dont care about storing sensitive messages on servers. Use Telegram/Facebook Messaging, etc...…
I'd love a technical explanation of how this works. Are all the messages kept on the phone? How does it relate to the Whisper Systems end to end encryption on the Android to Android version of WhatsApp? Is there some relationship between the two - is this very bizarre web interface there because of constraints relating to privacy and encryption? i.e. WhatsApp don't have your messages. [Edit] Is it peer to peer in som…
What i remember from the Erlang discussions around Whatsapp, they dont keep the messages on the server, only temporary until it has been delivered. So Im guessing that is the reason why they need your phone to be connected. Might have been in this video [1]... Not sure at the moment (will check later when im out of the office). [1] http://vimeo.com/44312354
"What protocol is used in Whatsapp app? SSL socket to the WhatsApp server pools. All messages are queued on the server until the client reconnects to retrieve the messages. The successful retrieval of a message is sent back to the whatsapp server which forwards this status back to the original sender (which will see that as a "checkmark" icon next to the message). Messages are wiped from the server memory as soon as the client has accepted the message"
[1] http://www.quora.com/What-is-WhatsApps-server-architecture
Don't you get it? It's a mobile app, which performs really well(hence no cloud storage I guess) and is associated with your phone, your phone is and will be the most important thing for whatsapp, the web thing is just a convenience for while you're at your laptop or desktop, like working and stuff, I find it awesome, it's a lot more productive then picking up the phone. I don't mind it requires having my phone connec…
While i agree whatsapp web should work in every browser the auther is forgetting one IMPORTANT gotcha: Whatsapp, is a messaging-routing platform. It doesnt store any messages. Thats what makes whatsapp strong. Its a feature. Thats why you need your phone. Its like SMS. They are not storing all your sensitive message. If you dont care about storing sensitive messages on servers. Use Telegram/Facebook Messaging, etc...…
If I want persistent group chat I'll use Hangouts or IRC/XMPP/Jabber etc. I have hundreds of options for that.
Earlier quoted context omitted.
I believe the issue is that unlike web chats and apps like Telegram, Whatsapp doesn't store conversations on their servers beyond what is required to deliver messages to the required destination device(s). This presents obvious problems with having not just a web client, but any client other than the main device, since the main device is the only store of the existing conversations. New messages sent also need to be…
Doesn't that sound like a poor architecture then? If the system is reliant on the main device, what happens if that gets run over or destroyed? WhatsApp have no control over the fate of the device. Why wouldn't they store the messages on the server and sync from that? WhatsApp have control of the fate of their own servers, which is far more reliable, SURELY. If I send a new message from a device, either the other dev…
If you want a better UX there are hundreds of other options available.
1st your career is too short to fully understand the web and be able to judge a company like facebook.
2nd you haven't realized that whatsapp might be its own company but its owned by facebook, and after the buyout facebook did a clear up on devs and hired / assigned their own devs to that.
3rd you haven't realized that the power of the web is fading over the power of mobile web!
I understand that that's a blog and you are free to express your thoughts, but I am really repulsed by the fact that this post has so many upvotes. It makes me think that people reading and upvoting on this site have no idea of technology.
Earlier quoted context omitted.
Try searching for "WhatsApp".
TIL Hackernews has a searchbar I'm still finding my way trough this UI (Why is there no 'inbox' with replies to your comments?!)
Did you come from /r/programming? There have been a few comment threads talking about hacker news recently.